10 key takeaways on compliance for medical group leaders in 2025

Medical practices today face a growing list of compliance challenges, from cybersecurity threats to shifting regulations. In a recent MGMA member-exclusive webinar "Answers for Your Top Compliance Concerns," Laura Weeks, MBA, CHC; and Christopher Parrella, JD, CPC, CPCO, CHC, co-founders of HelpUCompli, shared actionable strategies to help healthcare organizations stay compliant and mitigate risk.  

Here are the top 10 takeaways from the session, including insights from the Q&A discussion. 

1. Cybersecurity vigilance is non-negotiable 

The Change Healthcare breach was a wake-up call for the industry. "Balls were dropped at many different levels," said Parrella. The breach, which compromised billions of bits of data, exposed vulnerabilities in remote network security and authentication controls. Practices should conduct regular penetration testing, update firewall protections, train staff on phishing threats and enforce multi-factor authentication and real-time monitoring to immediately detect unauthorized access. 

• Access MGMA's member-exclusive Cybersecurity in Medical Practices Playbook.
• Learn how to avert crisis with well-documented plans for EHR, RCM downtime.